Holmes.Sherlock I have the following scenario: One OpenVPN server is hosted by our client at remote location to which we have no administrative control. It has allocated one single IP & therefore one single set of configuration files to connect to that remote server. We are five in the team. So, the problem we face is, when one connects to the remote server, other one who was working gets disconnected automatically. Can anyone please suggest me any setup which will allow us to work in parallel?
Holmes.Sherlock maikcat wroteyou can configure openvpn to use server mode instead of point to point.. We don't have any control on how the server will be configured. We can play with our local system. Can't this be achieved by bridging/NAT-ing etc.?
janjust have one person connect via the VPN and then route the traffic of the others via that tunnel - it's a routing question, not a VPN question. This also depends a bit on the VPN setup (config files?) and on the operating systems used. the proper solution would be, as maikcat suggested, to reconfigure openvpn so that multiple clients are allowed to connect.
Holmes.Sherlock janjust wrotehave one person connect via the VPN and then route the traffic of the others via that tunnel - it's a routing question, not a VPN question. Thank you both for your help. Can you please give me some hints on how to configure iptables (as I'm runnung Ubuntu) to channel traffic through the tunnel? We don't have the authority to configure OpenVPN server.
janjust again, this largely depends on your local setup ; a quick&dirty setup would be * allow IP forwarding: echo 1 > /proc/sys/net/ipv4/ip_forward * allow forwarding: iptables -I FORWARD -i tun+ -j ACCEPT iptables -I FORWARD -o tun+ -j ACCEPT * set up masquerading: iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE * set up a route on the other PCs to route all traffic for the VPN to go via your ubuntu server
Holmes.Sherlock janjust wrote iptables -I FORWARD -i tun+ -j ACCEPT iptables -I FORWARD -o tun+ -j ACCEPT What does tun+ mean?
janjust What does tun+ mean? it means "match all tun devices": tun0, tun1, tun2, etc. if you have multiple openvpn instances then you do not need to specify multiple rules.